nanog mailing list archives

Re: Juniper firewalls - SSG or SRX


From: Owen DeLong <owen () delong com>
Date: Tue, 20 Apr 2010 04:18:11 -0700


On Apr 20, 2010, at 1:11 AM, Cian Brennan wrote:

On Mon, Apr 19, 2010 at 08:32:47PM -0400, Jeffrey Negro wrote:
Has anyone on Nanog had any hands on experience with the lower end of the
new SRX series Junipers?  We're looking to purchase two new firewalls, and
I'm debating going with SSG series or to make the jump to the SRX line.  Any
input, especially about the learning curve jumping from ScreenOS to JunOS
would be greatly appreciated.  Thank you in advance.

Depends. SRXes are (in my experience) still quite a bit away from stable. We've
had far more crashes than I'd like with them, without doing anything
particularly strange. SSGs on the other hand are a horrible pain to admin, but
(again, ime) seem stable as a rock. I assume SRXes will get betters given time,
so the question is can you afford the instability for the moment?

Interesting. My SRXes have been rock solid since upgrading to 10.0R1.8.

Owen



Current thread: